Back to Database
Status published
Medium
CVE-2006-3403
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows...
Vulnerability Description
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3403
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.ubuntu.com/usn/usn-314-1
- http://secunia.com/advisories/21187
- http://www.vupen.com/english/advisories/2006/4750
- http://www.novell.com/linux/security/advisories/2006_17_sr.html
- http://securitytracker.com/id?1016459
- http://secunia.com/advisories/20983
- http://www.vupen.com/english/advisories/2006/2745
- http://www.vupen.com/english/advisories/2006/4502
- http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html
- http://www.samba.org/samba/security/CAN-2006-3403.html
- http://docs.info.apple.com/article.html?artnum=304829
- http://secunia.com/advisories/22875
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876
- http://www.vmware.com/download/esx/esx-202-200610-patch.html
- http://secunia.com/advisories/21190
- http://secunia.com/advisories/21086
- http://www.securityfocus.com/archive/1/451426/100/200/threaded
- http://www.vmware.com/download/esx/esx-213-200610-patch.html
- http://secunia.com/advisories/21262
- http://www.securityfocus.com/archive/1/439880/100/100/threaded
- http://www.securityfocus.com/archive/1/439875/100/0/threaded
- http://www.kb.cert.org/vuls/id/313836
- http://secunia.com/advisories/23155
- http://www.securityfocus.com/bid/18927
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27648
- http://secunia.com/advisories/21019
- http://secunia.com/advisories/20980
- http://www.securityfocus.com/archive/1/440836/100/0/threaded
- http://www.redhat.com/support/errata/RHSA-2006-0591.html
- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
- http://www.securityfocus.com/archive/1/448957/100/0/threaded
- http://www.us-cert.gov/cas/techalerts/TA06-333A.html
- http://www.securityfocus.com/archive/1/451404/100/0/threaded
- http://secunia.com/advisories/21046
- http://secunia.com/advisories/21159
- http://www.securityfocus.com/archive/1/448957/100/0/threaded
- http://www.securityfocus.com/archive/1/440767/100/0/threaded
- http://www.debian.org/security/2006/dsa-1110
- http://www.securityfocus.com/archive/1/439757/100/0/threaded
- http://security.gentoo.org/glsa/glsa-200607-10.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355
- http://www.securityfocus.com/archive/1/451417/100/200/threaded
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:120
- http://secunia.com/advisories/21143
- ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
- http://secunia.com/advisories/21018
More from samba
View All →CVE-2022-29869
cifs-utils through 6.14, with verbose logging, can cause an information...
Medium
5.3
CVE-2022-29154
An issue was discovered in rsync before 3.2.5 that allows...
High
7.4
CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing...
High
7.8
CVE-2021-43566
All versions of Samba prior to 4.13.16 are vulnerable to...
Low
2.5
CVE-2020-14342
It was found that cifs-utils' mount.cifs was invoking a shell...
Medium
4.4
Affected Vendor
samba
View all reports →Affected Software
samba
Vulnerable Versions:
3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.14a, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 3.0.19, 3.0.20a, 3.0.20b, 3.0.21, 3.0.21a, 3.0.21b, 3.0.21c, 3.0.22
Timeline
Official Publish:
July 12th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.